#导出证书echo | openssl s_client -connect api.idp.ah.cegn:443 2/dev/null | openssl x509 api-idp-ah-cegn.crt// 添加证书 密码changeit-importcert 标准导入证书参数Java 官方推荐-storepass changeit 直接指定证书库密码不用手动输入-noprompt 不弹询问直接导入脚本专用jdk1.8keytool -importcert -alias api-idp-ah-cegn -keystore /opt/jdk/jdk1.8.0_391/jre/lib/security/cacerts -storepass changeit -file api-idp-ah-cegn.crt -nopromptjdk17keytool -importcert -alias api-idp-ah-cegn -keystore /opt/jdk/jdk-17.0.2/lib/security/cacerts -storepass changeit -file api-idp-ah-cegn.crt -noprompt删除原先的证书keytool -delete -alias api-idp-ah-cegn -keystore /opt/jdk/jdk1.8.0_391/jre/lib/security/cacerts -storepass changeit -noprompt注意添加证书后需要重启java程序